CVE-2022-22450: Malicious File Upload
First published: Tue Jul 12 2022(Updated: )
IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Verify Governance | =10.0 | |
| Linux Linux kernel | ||
| <=10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-22450.
What is the severity of CVE-2022-22450?
The severity of CVE-2022-22450 is low with a CVSS score of 3.8.
How can a privileged user exploit CVE-2022-22450?
A privileged user can exploit CVE-2022-22450 by bypassing extension security in an HTTP request to upload a malicious file.
Which IBM product is affected by CVE-2022-22450?
IBM Security Verify Identity Manager 10.0 is affected by CVE-2022-22450.
Is Linux Linux kernel vulnerable to CVE-2022-22450?
No, Linux Linux kernel is not vulnerable to CVE-2022-22450.
How can I fix CVE-2022-22450?
To fix CVE-2022-22450, IBM recommends applying the necessary patches and updates provided in the official IBM Security Verify Identity Manager documentation.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm security verify governance
- version/ibm security verify governance/10.0
- vendor/linux
- canonical/linux linux kernel
- canonical/ibm security verify governance, identity manager virtual appliance component
- version/ibm security verify governance, identity manager virtual appliance component/10.0